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I. REAL PARTY IN BSTTltFST JAN 0 4 2006 

The real party-in-interest is the assignee, Hewlett-Packard Company, a Delaware 
corporation, having its principal place of business in Palo Alto, California, 

11 RELATED APPEALS AND INTERFERENCES 
There are no known related appeals or interferences known to appellant, the 
appellant's legal representative, or assignee that will directly affect or be directly affected 
by or have a bearing on the Appeal Board's decision in the pending appeal. 

s 
•j 

IK, STATES of cffATMff 
Claims 1-32 stand finally rejected. The rej8ctioit-of claims 1 -32 is appealed 

IV. STATUS OP AMENDMENTS 
No amendments were made after receipt of the Final Office Action, All 
amendments have been entered. 

SUMMARY OF CLAIMED SUBJECT MATTER 

The following provides a concise explanation of the subject matter defined in 
each of the claims involved in the appeal, referring to the specification by page and line 
number and to the drawings by reference characters* as required by 37 C.F.R. 
§ 41 ,37(cXl)(v), Each element of the claims is identified by a corresponding reference to 
the specification and drawings where applicable. Note that the citation to passages in the 
specification and drawings for each claim element does not imply that the limitations 
from the specification and drawings should be read into the corresponding claim element 
or that these are the sole sources in the specification supporting the claim features. 

Claim 1 

A method for communicating information from a private database (FIG. 2: #218) 
to a wireless communication device (FIG. 2: #100), the method comprising (FIG. 4; para. 
[441): 
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receiving a private database access request from the wireless communication 
device, the private database access request including at^least an appliance identification 
(ID) that uniquely identifies the wireless communication device (FIG. 4: #404; para. 
[45]); 

comparing the appliance ID with a security indicia, the security indicia associated 
with the wireless communication device (FIG. 4: #406; para. [45]); and 

communicating the information from the private database to the wireless 
communication device when the appliance ID corresponds to the security indicia (FIG. 4: 
#408; para. [45]). 

Claim 12 

A method for remotely accessing a private database (FIG, 2: #218) residing in a 
remote database device (FIG, 2: #126) using a wireless communication device (FIG. 2: 
#100), the method comprising (FIG. 3: para. [42]): 

. transmitting a radio frequency (RF) communication to the remote database 
device, the RF communication comprising a private database access request and 
comprising an appliance identification (ID) that uniquely identifies the wireless 
communication device, such that when the appliance ID corresponds to a security indicia 
residing in the remote database device the private database is communicated from the 
remote database device (FIG, 3: #304; para. [43]); and 

receiving a second RF communication comprising at least the private database 
only when the appliance ID corresponds to the security indicia (FIG. 3: #306; para. [43]). 

Claim 19 

A system (FIG. 1: #1 00) thai remotely accesses a private database (FIG. 2: #218) 
using a wireless communication device (FIG. 2: #100), the wireless communication 
device comprising (FIGS. 1 and 2: para. [16], [18]): 

a transceiver (FIG. 2: #216) configured to receive and transmit radio frequency 
(RF) communications; (para. [19], [25]) 

an appliance identification (ID) (FIG. 2: #210) corresponding to a multiple-use 
unique identifier of the wireless communication device (FIG. 2: #100) that is included in 

3 
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all transmitted RF communications from the wireless communication device (para- [28]); 
and 

a processor (FIG, 2; #202) configured to cause the transceiver to transmit a first 
RF communication to a database device (FIG. 1: #126) having at least one private 
database (FIG. 2: #218), the first RF communication comprising me appliance ID and a 
private database access request so that the database device oommunicatcs the private 
database via a second RF communication only when the appliance ID corresponds to a 
security indicia residing in the database device associated with the private database, the 
security indicia (para. [23-28]; FIG. 3: #304, 306; para. [42-43]). 

Claim 22 

A system (FIG. 1: #100) that provides accesses: to a private database (FIG. 2: 
#21 8) comprising: (FIGS. 1 and 2; para. [16], [18]) 

a communication system interface (FIG. 2: #224) configured to receive a private 
database access request and a multiple-use unique identifier (ID) generated by a remote 
wireless communication device (FIG. 2: #100) and configured to transmit a private 
database (FIG. 2: #218) to the remote wireless communication device (para. [28-29]; 
FIG. 4: #404; para. [4^45]); 

a security indicia (FIG. 2: #234) that corresponds to the multiple-use unique ID, 
the multiple-use unique ID being included in all communications from the wireless 
communication device and uniquely identifying the wireless communication device 
(para. [28], [33]); and 

a processor (FIG. 2: #226) configured to compare the multiple-use unique ID to 
the security indicia, and further configured to cause communication of the private 
database to the remote wireless communication device only when the multiple-use unique 
ID corresponds to the security indicia (para. [29-30], [33]; FIG. 4: #406; para. [45]). 

Claim 24 

A computer-readable medium having a program tor remotely accessing remote 
private databases (FIG. 2: #218) using a wireless communication device (FIG. 2: #100), 
the program comprising logic configured to (FIG. 3: para. [42], [57]): 

4 
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cause a transceiver to transmit a first radio frequency (RF) communication 
comprising a private database access request and a multiple-use unique identifier that 
uniquely identifies the wireless communication device, the first RF communication 
directed to a remote database device wherein a private database resides, and wherein the 
multiple-use unique identifier is included in all RF coinmunications from the wireless 
communication device (FIG. 3: #304; para. [28], [43]); aid 

cause the transceiver to receive a second RF communication comprising at least 
the private database, the private database communicated to the wireless communication 

device by the remote database device only when the multiple-use unique identifier 

i 

corresponds to a security number residing in the remote : database device (FIG. 3: #306; 
para. [43]). 

Claim ft 

A method for communicating information from a private database (FIG. 2: #21 8) 
to a wireless telephone (FIG. 2: #100), the method comprising (FIGS. 3 and 4: para. [42], 
[44]): 

transmitting a radio frequency (RF) communication from the wireless telephone 
to a remote database device wherein the private database resides, the RF communication 
comprising at least a private database access request and comprising an appliance 
identification (ID) that uniquely identifies the wireless telephone, the appliance ID being 
included in all communications from the wireless telephone and uniquely identifying the 
wireless telephone (FIG. 3: #304; para* [43]); 

receiving the private database access request and the the appliance ID by the 
remote database device (FIG. 4: #404; para. [45]); 

comparing the appliance ID with a security indicia, die security indicia associated 
with the wireless communication device (FIG. 4: #406; para. [45]); 

communicating the information of the private database from the remote database 
device when the appliance ED corresponds to the security indicia (FIG. 4: #408; para. 
[45]); and 

receiving a second RF communication by the wireless telephone comprising at 
least the information of the private database (FIG. 3: #306; para- [43]). 

5 
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Claim 27 

A method of software execution for remotely accessing a remote database (FIG. 
2: #12$) using a portable wireless communication device (PWCD) (FIG. 2: #100), the 
method comprising (FIGS. 3 and 4; para. [42], [44]): 

transmitting, via a radio frequency (RF) communication, an access request from 
the PWCD to the remote database, the access request including an identification of the 
remote database and an identification (ID) of the PWCD (FIG. 3: #304; para. [43]); 

receiving, via an internet, the access request at the remote database (FIG. 4: #404; 
pax* [45], [21]); and 

verifying, at the remote database, whether the ID is valid for allowing the PWCD 
to have access to information stored in the remote database (FIG, 4: #406; para, [45]). 

Claim 18 

The method of claim 27 further comprising transmitting, via both the internet and 
the RF communication, the information from the remote database to the PWCD (FIG, 1: 
para. [19-22]). 

Claim 30 

The method of claim 27 wherein the PWCD is a cellular phone, and the ED is a 
cellular phone number of the cellular phone (para. (34]), 

Claim 31 

The method of claim 27 further comprising recognizing, at die remote database, a 
cellular phone number in the access request for identifying the PWCD as authorized to 
access the infbmiation stored in the remote database (para. [34], [36], [45]). 

Claim ?2 

The method of claim 27 further comprising authenticating, without a user of the 
PWCD entering a password, whether the PWCD is authorized to access the information 
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stored in the remote database (para. [16], [36]), 

: 

VL GROUNDS OF REJECTION TO BE REVIEWED ON APPEAR 

! 
i 

Claims 1 - 31 are rejected under 35 USC § 103 as being unpatentable over US 
2002/0069355 (Garrison) in view of US 2002/0077077 (Rezvani). 

Claim 32 is rejected under 35 USC § 103 as being unpatentable over Garrison and 
Rezvani in farther view of USPN 6,178,505 (Schneider). S 
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Vn. ARGUMENT 

The rejection of claims 1 - 32 is improper, and Applicants respectfully requests 
withdraw of this rejection. 

The claims do not stand or fall together. Instead, Applicants present separate 
arguments for various independent and dependent claims. Each of these arguments is 
separately argued below and presented with separate headings and sub-heading as 
required by 37 C.F.R. § 4l.37(c)(l)(vii). 

i 

Claim Rejections: 35 USC § 103 

Claims 1 - 3 1 are rejected under 35 USC § 1 03 as being unpatentable over US 
2002/0069355 (Garrison) in view of US 2002/0077077 (Rezvani). This rejection is 
traversed. 

To establish a prima facie case of obviousness, mice basic criteria must be met 
First, there must be some suggestion or motivation, either in the references themselves or 
in the knowledge generally available to one of ordinary skill in the art to modify the 
reference or to combine reference teachings. Second, there must be a reasonable 
expectation of success. Finally, the prior art cited must teach or suggest all the claim 
limitations. See M.P.E.P. § 2 143. Applicant asserts that the rejection does not satisfy 
these criteria. 

Overview of Garrison A Ragvanf 

As a precursor to the arguments, Applicants provide an overview of Garrison and 
Rezvani. 

Garrison teaches systems and methods for enabling a user or client to securely 
access a database from a remote location ([001 3]). The important aspect in Garrison is: 
What steps are necessary for a client to securely access the remote database? FIG. 4A in 
Garrison shows the numerous steps involved for a client to securely access the remote 
database. Generally, Garrison teaches an encrypted key exchange between the client 
computer and the server computer. After the client registers with the server, the client and 
server exchange various encrypted public keys, passwords, log names, etc. in order to 

8 
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ensure a secure communication between the client and server (see [0064-0067]). Hackers 
cannot easily access the database since the client and server use a new encryption key 
exchange for each data session ([0043]). 

Rezvani teaches systems and methods for registering and authenticating wireless 
devices (see Abstract and Claims). FIG. 1 of Rezvani shows a system 1 10 having a 
wireless device 210 and one or more controllers 28 (such! as sensors, appliances, VCRs, 
microwave ovens, or thermostats: see [0037]). The controller has a discovery mode and 
an operation mode. In the discovery mode, the controller registers the wireless device; 
and in the operation mode, the controller receives data from the wireless device 
(Abstract), ha the discovery mode, the wireless device transmits registration data to the 
controller to enable the controller to interface with the wireless device (Abstract and 
[0012]). 

j. No gaegestiaaffliflflaflan m ModHv/comhi ne Bsissam 

For at least the following reasons, no suggestion or motivation exists to modify or 
combine Garrison in view of Rezvani. 

First, Applicant argues that no teaching or suggestion exists to make the 
combination because the references are directed to completely different inventions. 
Garrison is directed to establishing a secure connection between a client computer and a 
server computer so the client can safely and securely access a database (see [0014]). In 
Garrison, a new encryption key is used for each new data session to inhibit unauthorized 
users (La., hackers) from accessing the database (see [0042]). By contrast, Rezvani is 
directed to automatically detecting a wireless device and registering the wireless device 
with a controller (see [0055], Abstract, and Summary). 

The Examiner must provide objective evidence, rather than subjective belief end 
unknown authority, of the requisite motivation or suggestion to combine or modify the 
cited references. In re Lee, 61 U.S.P.Q.2d. 1430 (Fed. Or. 2002). Obviousness cannot be 
established by combining the teachings of the. prior art to produce the claimed invention 
absent some teaching or suggestion supporting the combination. ACS Hospital Systems, 
Inc. v. Montefiore Hospital, 732 F.2d 1572, 1577,221 U.SJ.Q, 929, 933 (Fed. Cir. 
1 984). Such te aching or suggestion does not exist. 
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Second, Applicant argues that no teaching or suggestion exists to make the 
combination because the references are directed to solving completely different 
problems* In Garrison, the Background section discusses Security concerns because 
unauthorized remote users can hack into databases. In feci, Garrison explicitly provides a 
''need paragraph" and states that a need exists "for providing a more secure system and 
method of allowing remote access to a database system" <j[001 2}). By contrast, Rezvani 
solves a completely different problem. InRevzani, the Background section discusses the 
problems with tracking wireless devices and the problems of clock drift between 
controllers and transmitters. Rezvani explicitly provides a "need paragraph" and states a 
need exists "to have a system in which the registration oflhe transmitter devices is 
flexible and sufficiently easy to perform by a user . . ([Cj007]). 

To establish a prima facie case, the Examiner must not only show that the 
combination includes all of the claimed elements, but also a convincing line of reason as 
to why one of ordinary skill in the art would have found the claimed invention to have 
been obvious in light of the teachings of the references. Ex parte Clapp, 227 U.S.P.Q. 
972 (B.P.A J. 1985). In ligjit of the completely different inventions and problems being 
solved in Garrison and Rezvani, no suggestion or motivation exists to combine or modify 
these references. 

For at least these reasons, Applicant respectfully asks the Examiner to withdraw 
the rejection since a prima facie case of obvious has not been established* 

Rggnan&B *<> E*amlnSlIfl Arguments on Combination 

The Examiner argues that "applicant appears to read to an extremely deep 
leveling the cited prior art so as to render it un-combinable M (see FOA at p. 2). Applicants 
respectfully disagree. In the Overview Section above. Applicants provide overviews of 
both Garrison and Rezvani as taught in the respective Abstracts and Summaries. Garrison 
and Rezvani are directed to different inventions that solve different problems in the art 
No motivation exists to combine these references. 

Applicants argue that die Examiner is performing an improper piecemeal 
construction that uses hindsight to arrive at the claim elements. In other words, the 
Exam ine r is picking and choosing sentences or teachings from Garrison and Rezvani with 

10 
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hindsigjit of Applicants' invention to allegedly obviate the pending claims. One cannot 
use hindsight reconstruction to pick and choose among isolated disclosures in the prior 
art to deprecate the claimed invention, InreFine, 837F,2d 1071, 5 U.S,P.Q.2d 1596 
(Fed. Cir. 1988). 

Next, the Examiner further argues that Garrison and Rezvani solve "similar 
problems which means a proper combination" (see FOA at p. 2). Applicants strongly 
disagree with this conclusion and respectfully ask die Boixi of Appeals to read the 
Backgrounds of Garrison and Rezvani. Garrison discussed the need to provide a secure 
communication between a client computer and a database; so hackers cannot "break into 
the database system and retrieve or manipulate the data therein" ([001 1])> By contrast, 
Rezvani discusses the problems with tracking wireless devices and the problems of clock 
drift between controllers and transmitters. Rezvani explicitly provides a "need paragraph 1 ' 
and states a need exists *1o have a system in which the registration of the transmitter 
devices is flexible and sufficiently easy to perform by a user , , ([0007]). Rezvani is not 
directed to establishing an encryption protocol so hackers cannot access remote 
databases I 

II» No Reasonable Expectation ofSgsggg 

No reasonable expectation of Buccess has been established for modifying Garrison 
with the teachings of Rezvani to arrive at the recitations of the claims. In other words, 
even assuming arguendo that Garrison and Rezvani are combinable (which they are not), 
the combination will not yield a reasonable expectation of success. 

Garrison expressly teaches that a user engages numerous steps to secure a 
communication with a server in order to access a database. Hie method in Garrison is 
shown in FIG. 4A: the user contacts the server, the server returns an encryption key, the 
user supplies a password to the server, the server translates the password, the user 
encrypts and sends data request, etc. (see specification beginning at [0064]). In direct 
contrast to Garrison, Rezvani teaches embodiments that "automatically detect a wireless 
control device and register that device with the receiver/controller" (emphasis added: see 
[0055])- In other words, Rezvani teaches methods for automatically discovering and 
registering wireless devices, "such as sensors, appliances, VCRs, microwave ovens, and 

11 
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thermostats'* (see [0037]). Garrison teaches numerous steps to secure communication 
between a computer system and server. 

In view of these deficiencies, the Office Action hks railed to establish a 
reasonable expectation of success with a combination or Uodifi cation of Garrison and 
RezvanL Therefore, the prima Jade case of obviousness: has not been established. 

I 

Response to Fv Hm t m ', Arguments on Success 

The Examiner argues that "the applicant appears to attack the references individually 
..." (see FOA at p. 2). Applicants disagree. As argued above, Applicants combine the 
teachings of Garrison and Rezvani and argue that this combination would either modify 
Garrison and Rezvani beyond their intended purpose and/or change the principle 
operation of the art being modified. Again, Garrison teaches a method for providing a 
client with secure access to a remote database. The method involves numerous steps and 
encrypted key exchanges to provide this secure access (see FIG. 4 A of Garrison). By 
contrast, Rezvani teaches methods for automatically discovering and registering wireless 
devices. The combination of Garrison and Rezvani would not yield success since these 
references would have to be modified well-beyond their intended purpose and principally 
and significantly change their modes of operation. 

BL All Ejgaati No * Ta ught or gaggajgfl 

All of the dements of the claims are not taught or suggested in Garrison and 
Rezvani. In other words, evening assuming arguendo that Garrison and Rezvani are 
successfully combinable (which they are not), the alleged combination does not teach or 
suggest all the elements in the claims. Examples for various independent and dependent 
claim groups are provided below. 

Independent Claims 1 and 1^ 

Independent claims 1 and 12 and their dependent claims recite numerous 
limitations that are not taught or suggested in Garrison in view of Rezvani. Claim 1 is 
selected for discussion. 
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Claim 1 recites that a wireless communication dejvice provides an access request 
to a private database. The access request includes "an appliance identification (ID) that 
uniquely identifies the wireless communication device." Nowhere does Garrison teach or 
suggest that the access request itself includes an appliance identification that uniquely 
identifies the wireless communication device. By contrast, Garrison teaches that the user 
or client transmits a password to identify himself (i.e„ the user), not the appliance device. 
Garrison states: 

j 

i 

In accordance with another feature of the present invention, the 
client initially transmits a password to the server in order to 
identify the user of the client as an authorized user. (Emphasis 
added: [0016]). 

In other words, Garrison teaches that the user sends a password to identify himself 
as an authorized user. This teaching is in contrast to the claimed recitations. Claim 1 
recites receiving an access request from the wireless communication device. The access 
request includes an appliance identification (not user identification). This appliance 
identification "uniquely identifies the wireless communication device" (not uniquely 
identifies the user). 

Garrison repeatedly reiterates that his access request identifies the user, not 
the wireless device. FIG. 4A is a flow chart illustrating the method of Garrison. The 
client computer and server utilize a public key exchange to establish a new encryption 
key (see [0065]). Garrison then teaches how the access request is performed: 

After receiving the new encryption key from the server 1 7a, the 
client 1 4 encrypts the user's password and log name with the new 
encryption key and transmits the password and log name to the 
server 17a .... 

The server 17a compares the log name transmitted by the client 14 
with the log name in the password data table entry corresponding 

13 . 



PAGE 17/35 4 RCVDAT 1/412006 4:59:22 PM (Eastern Standard Time] ' SVR:USPTO-EFXRF-6i39 ' DN1S:2738300 ' CSID:281 514 8332 1 DURATION (mm-ss):09-18 



Jan 04 200G 5:08PM HP IP GROUP FRX 



281-514-8332 



p- 18 



Application No, I0tf85,366 
Appeal Brief 

I 
I 

Willi the password. If the log names match, thi user of the client 14 
is determined to be an authorized user, (See [0066 - 0067]: 
portions omitted for brevity). 

Nowhere does this section or any section of Garrison teach or suggest that the 
access request includes an appliance identification. Instead, Garrison expressly teaches 
that the user sends a password and log name, A password and log name, however, do not 
include an appliance identification. In Garrison, nowhere is the actual appliance 
identified and sent to the database. 

For at least these reasons, claims 1 and 12 allowable over Garrison in view of 
Rezvani A dependent claim inherits the limitations of abase claim. Thus, for at least the 
reasons given in connection with claims 1 and 12, the dependent claims are also 
allowable over Garrison in view of Rezvani. 1 

Garrison Teaches Awav 

Garrison actually teaches away from the recitations of claim L l In claim 1, the 
database receives an access request from the wireless device. The access request includes 
(1) the database access request and (2) the appliance ID, If the appliance ID corresponds 
with security indicia, then the database allows access. In other words, access to the 
database depends on the appliance ID of the wireless device itself (not passwords from 
users). Applicants* specification supports this "simplified, yet secure, access to a private 
database" ([16]): 

Accordingly, the user requesting private database access with the 
wireless communication device need not enter a special password 
or the like because the wireless communication device is 
recognized by the remote database device, (para. [16]), 



1 Garrison also teaches away from the combination of Rezvani which teaches automatically identifying the 
wifeless communication device. 

14 
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By contrast, access to the database in Garrison depends on a complex encrypted 
password key exchange between a user and the server, damson expressly teaches that a 
user engages numerous steps exchanging various encrypted public keys, passwords, log 
names, etc. in order to ensure a secure communication between the client and server (see 
[0064-0067]). ; 

For at Least these additional reasons, claims 1 and 12 allowable over Garrison in 
view of Rezvani* A dependent claim inherits the limitatioijis of a base claim. Thus, for at 
least the reasons given in connection with claims 1 and 12* the dependent claims are also 
allowable over Garrison in view of Rezvani. > 

Independent Claims 19. 22. 24. and 25 

Independent claims 19, 22, 24, and 25 and their dependent claims recite numerous 
limitations that are not taught or suggested in Garrison in view of Rezvani. Claim 19 is 
selected for discussion. 

Claim 19 recites a wireless communication device that comprises an appliance 
ID corresponding to a multiple-use unique identifier that is included in all transmitted 
RF communications from the wireless communication device. Nowhere does Garrison in 
view of Rezvani teach or suggest that the wireless device has an appliance ID that 
corresponds to a multiple-use unique identifier that is included in all transmitted RF 
communications. 

First, Applicants argue that Garrison and Revzani do not teach or suggest that an 
appliance ID is transmitted from the wireless device to the private database in order to 
determine if the wireless device has access to the private database. Applicants reiterate 
the arguments given above in connection with claim 1: Garrison toadies that a user enters 
into a encrypted key exchange with a server and enters a password and log name using 
encrypted keys to identify himself (i.e., the user). Nowhere does Garrison and Rezvani 
teach or suggest transmitting an appliance ID in all RF communications to provide a 
wireless device with access to a remote private database. 

For at least these reasons, claims 19, 22, 24, and 25 and their dependent claims 
are allowable over Garrison in view of Rezvani. 
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Second, Applicant respectfully cites MPEP §21 A.01: "[T]he words of a claim 
must be given their plain meaning unless applicant has provided a clear definition in the 
specification." Applicant has provided a clear definition jin the specification for the term 
"multiple-use unique identifier." Specifically, Applicants specification states: 

i 
i 

Accordingly, appliance ID 2 10 is referred .to! herein as a multiple- 
use unique identifier since the appliance ID 210 uniquely identifies 
the appliance and identifies the appliance as an authorized device 
to embodiments of the private database wireless access system 
1 00. (Emphasis added: see para, [28] : p. 6 last paragraph). 

I 

i 

Nowhere does Garrison in view ofRezvani teach or suggest a multiple-use unique 
identifier that uniquely identifies both the appliance and the appliance as an authorized 
device. 

The Examiner argues that the claimed multiple-use unique identifier is taught in 
Rezvani at paragraphs [0004], [0108-011 1], and [01 13]. Applicants strongly disagree. 
Paragraph [0004] in Rezvani teaches that cellular phones have electronic subscriber 
numbers (ESNs) that uniquely identify the cellular phone. Paragraphs [0108-01 1 1] in 
Rezvani teach mat various communication links can be used to connect a wireless device 
with a server. Finally, paragraph [01 13] in Rezvani teaches that the wireless device can 
be various embodiments, such as cellular phones, personal digital assistants, and 
computers. Importantly, notice that nowhere does Rezvani teach or suggest whatsoever 
that the ESN itself is used to identify the wireless device and provide access to a remote 
database. In other words, Revzani teaches that ESNs on cellular phones are known. But, 
Rezvani never teaches or suggest that the ESNs are "included in all transmitted RF 
communications from the wireless device" so the wireless device can access a remote 
private database when the ESN "corresponds to a security indicia residing in the database 
device?' as recited in claim 19. 

For at least these reasons, claims 1 9, 22, 24, and 25 and their dependent claims 
are allowable over Garrison in view ofRezvani. 
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Third, claim 19 recites that the processor transmits a first RF communicatioa to 
the database device that has both (1) the appliance ID anid (2) the private database access 
request. Nowhere does Garrison in view of Rezvani teach or suggest that a first RF 
communication includes both an appliance identification and a private database access 
request. j 

The Office Action has not provided locations in garrison and Rezvani that teach 
or suggest RF communications to database, wherein the jlF communications have both 
(1) the appliance ID and (2) the private database access inquest. Such teachings or 
suggestions do not exist in the art of record. 

For at least these reasons, claims 19, 22, 24, and is and their dependent claims 
are allowable over Garrison in view of Rezvani, ) 

i 

Ind?PmflfiPtcln| m a7 j 

Claim 27 recites that a portable wireless communication device (PWCD) provides 
an access request to a private database. The access requesit includes (1) an identification 
of the remote database and (2) an identification of the PWCD. Nowhere does Garrison 
teach or suggest that the access request Itself includes identification of the PWCD. By 
contrast, Garrison teaches that the user or client transmits a password to identify himself 
(i.e., the user), not the appliance device. Garrison states; 

In accordance with another feature of the present invention, the 
client initially transmits a password to the server in order to 
identify die user of the client as an authorized user. (Emphasis 
added: [0016]). 

In other words, Garrison teaches that.the user Sends a password to identify himself 
as an authorized user. This teaching is in contrast to the claimed recitations. Claim 27 
recites receiving the access request at a remote database. The access request includes both 
(1) an identification of the remote database and (2) an identification of the PWCD. The 
combination of Garrison and Rezvani does not teach this clement 
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Garrison repeatedly reiterates that his access request Identifies the user, not 
the wireless device. FIG. 4A is a flow chart illustrating thje method of Garrison. The 
client computer and server utilize a public key exchange to establish a new encryption 
key (see [0065]). Garrison then teaches how the access request is performed: 

i 

! 

After receiving the new encryption key frajn the server 1 7a, the 

client 14 encrypts the user's password and log hame with the new 

j 

encryption key and transmits the password anc( log name to the 
server 17a .... j 

i 
j 

The server 17a compares the log name transmitted by the client 14 
with the log name in the password data table entry corresponding 
with the password. If the log names match, the user of the client 14 
is determined to be an authorized user. (See [0066 - 0067]: 
portions omitted for brevity). 

Nowhere does this section or any section of Garrison teach or suggest that die 
access request includes an appliance identification. Instead, Garrison expressly teaches 
that the user sends a password and log name. A password and log name, however, do not 
include an appliance identification. Nowhere is the actual appliance identified in 
Garrison. 

In paragraphs [0004], [0108-01 11], and [0113], Rezvani teaches cellular phones 
have ESNs and that various communication links can be used to connect a wireless 
device with a server. Importantly, notice that nowhere does Rezvani teach or suggest 
whatsoever that the ESN itself is used to identify the wireless device and provide access 
to a remote database. In other words, Revzani teaches that ESNs on cellular phones are 
known. But, Rezvani never teaches or suggest that the ESNs are transmitted with a 
request to access a remote database, the request including the ESN and an identification 
of the remote database. Further, Rezvani never teaches or suggests that the ESNs axe 
received at a remote database and then verified as to whether the ESN is 'Valid for 
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allowing the PWCD to have access to information stored; in the remote database" as 
recited in claim 27. 

For at least these reasons, claim 27 and its dependent claims ate allowable over 
Garrison in view of Rezvani. i 

i 

Garrison Teachea Awav j 

Garrison actually teaches away from the recitations of claim 27. 2 In claim 27, the 
database receives an access request from the wireless dedce. The access request includes 
(1) the database access request and (2) the appliance ID. if the appliance ID is verified as 
being valid at the database, then the database allows acceis. In other words, access to the 
database depends on the appliance ID of the wireless device. Applicants' specification 
supports this ''simplified, yet secure, access to a private database" ([16J) : 

Accordingly, the user requesting private database access with the 
wireless communication device need not enter a special password 
or the like because the wireless communication device is 
recognized by the remote database device, (para. [1 6]), 

By contrast, access to the database in Garrison depends on a complex encrypted 
password key exchange between a user and the server. Garrison expressly teaches that a 
user engages numerous steps exchanging various encrypted public keys, passwords, log 
names, etc in order to ensure a secure communication between the client and server (see 
[0064-0067]). 

For at least these additional reasons, claim 27 and its dependent claims are 
allowable over Garrison in view of Rezvani, 

Claim IS 

Claim 28 recites transmitting, via both the internet and the RF communication, the 
information from the remote database to the PWCD. In other words, claim 28 recites two 



2 Garrison also teaches away from the combination of Rezvani which teaches automatically identifying the 
wirelesa communication device, 

19 
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different forms of communication for transmitting information to the remote database. 
Garrison teaches internet communication but not RF communications. Thus. Garrison 
does not teach all the elements of claim 28. 

The Examiner argues that since Garrison mentions cellular connections in 
paragraph [0033], claim 28 is obvious. Applicants disagree. Garrison does state that the 
communication network 18 in FIG. 1 can be a cellular jtetwork. Garrison, though, never 
shows multiple networks (i.e., both RF compatible and internet compatible networks). 
Further, Garrison never suggests that such multiple networks could be used such that both 
internet and RF communications are used to transmit data to and from a wireless device 
and a private remote database. How would such multiple networks be configured? 
Garrison never discusses such embodiments because Ms embodiments only show and 
suggest a single network 18. 

™n\m% SB sad ftl 

Garrison in view of Rezvani do not teach or suggest the elements of claims 30 and 
31. Claim 30 is selected for discussion. 

Claim 30 recites that the PWCD is a cellular phone, and the ID is a cellular phone 
number of the cellular phone. In other words, claim 30 recites that a cellular phone 
number is transmitted to a remote database and used to grant access to the cellular phone 
to the database. Nowhere does Garrison in view of Rezvanl teach or suggest that a 
cellular phone number is transmitted to a remote database and then verified to allow the 
cellular phone to have access to the database. 

The Examiner argues that this element in taught in Rezvani's ESNs. Applicants 
strongly disagree. Nowhere does Rezvani teach or suggest whatsoever mat the ESN itself 
is used to identify the wireless device and provide access to a remote database. In other 
words, Revzani teaches that ESNs on cellular phones are known. But, Rezvani never 
teaches or suggest that the ESNs are transmitted with a request to access a remote 
database, the request including the ESN and an identification of the remote database. 
Further, Rezvani never teaches or suggests that the ESNs are received at a remote 
database and then verified as to whether the ESN is 'Valid for allowing the PWCD to 
have access to information stored in the remote database." 
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i 

Claim. 32 

Claim 32 recites authenticating, without a user of the PWCD entering a password, 
whether the PWCD is authorized to access the informatioji stored in the remote database. 
The art of record does not teach or suggest this element. 

Garrison actually teaches away. Access to the database in Garrison depends on a 

i 

complex encrypted password key exchange between a user and the saver Garrison 

i 

expressly teaches that a user engages numerous steps exchanging various encrypted 
public keys, passwords, log names, etc. in order to ensure a secure communication 
between the client and server (see [0064-0067]), Claim 32, however, recites 4S without a 
user of the PWCD entering a password" Thus, the combination of Garrison with 
Schneider is not proper. 

The Examiner cites Schneider at column 3, lines ljS-27. This section teaches that 
firewalls have different degrees of trust depending on the source of information. Nowhere 
does Schneider teach or suggest the re citations as actually recited in claim 32. Claim 32 
recites authenticating a wireless device without a user entering a password so the wireless 
device can access a remote database. Schneider is completely unrelated to the claim 
elements. 
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CONCLUSION 

In view of the above, Applicants respectfully request the Board of Appeals to 
reverse the Examiner's rejection of all pending claims. 

Any inquiry regarding this Amendment and Response should be directed to Philip 
S. Lyren at Telephone No. (281) 514-8236, Facsimile No.; (281) 514-8332, In addition, 
all correspondence should continue to be directed to the following address: 



Hewlett-Packard Company 

Intellectual Property Administration 

P.O. Box 272400 j 

Fort Collins, Colorado 805^7-2400 



Respectfully submitted, 

Philip S, Lyren 
Reg. No. 40,709 
Ph: 281-514-8236 



CRBTfPTf^ATP. TrMHP Jt 37 C.F.R. 1.8 
The under signed hereby certifies that this paper or papers, aa described herein, is being transmitted to die United State. 
Patent and Trademark Office facsimile number S71-273-8300on thi 44h _ day/>f Januajy, 2006. 
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vm. Claim* feEBgnfllj 

1 . A method for communicating information from a private database to a wireless 
communication device, the method comprising: j 

receiving a private database access request from the wireless communication 
device, the private database access request including at; least an appliance identification 
(ID) mat uniquely identifies the wireless communication device; 

comparing the appliance ID with a security indicia, the security indicia associated 
with the wireless communication device; and : 

communicating the information from the private database to the wireless 
communication device when the appliance ID corresponds to the security indicia. 

2. The method of claim 1, wherein the appliance ID is multiple-use identification 
indicia that is included in all communications from the wireless communication device. 

3. The method of claim 2, wherein the multiple-use identification indicia and the 
security indicia correspond to a telephone number of the wireless communication device. 

4. The method of claim 1, wherein the appliance ID is a unique identifier 
included in a header information of the private database access request from the received 
wireless communication device. 

5. The method of claim 1, wherein communicating further comprises transmitting 
the information as a radio frequency (RF) signal to the wireless communication device. 

6. The method of claim I, wherein receiving the private database access request 
further comprises receiving information selecting one of a plurality of different private 
databases wherein the selected private database is communicated to the wireless 
communication device when the appliance ID corresponds to the security indicia. 

7. The method of claim 1, former comprising; 
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. ; 

receiving a second private database access request from a second wireless 
comnrunication device, the second private database access request including at least a 
password generated by a user; 

comparing the received password with a security! code, the security code uniquely 
associated with the user; and 

associating a second security indicia with a seciond unique appliance ID of the 
second wireless communication device when the received password corresponds to the 
security code, so that the private database is communicated to the second wireless 
communication device. 

i 

i 

i 

8. The method of claim 7, ftirther comprising saving the second unique appliance 
ID as the second security indicia uniquely associated with the second wireless 
communication device. 

9. The method of claim 7, further comprising: 

receiving a subsequent private database access request from the second wireless 
communication device, the subsequent private database access request including at least 
the second unique appliance ID; 

comparing the second unique appliance ID with the second security indicia; and 
communicating the private database to the second wireless communication device 
when the second unique appliance ID corresponds to the second security indicia. 

10. The method of claim 1, further comprising: 

uniquely associating a plurality of unique appliance IDs with a plurality of unique 
security indicia, wherein one appliance ID uniquely identifies one of a plurality of 
wireless communication devices and wherein each of the security indicia are uniquely 
associated with one of a plurality of private databases; 

receiving the private database access request from one of the plurality of wireless 
communication devices, the private database access request comprising at least the 
appliance ID of the transmitting wireless communication device and an aocess request to 
a selected private database selected from the plurality of private databases; 

24 
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comparing the appliance ID of the transmitting Wireless communication device 
with the plurality of unique security indicia; and 

communicating the selected private database ) to the transmitting wireless 
communication device when the appliance ID corresponds to the security indicia of the 
selected private database. i 

11. The method of claim 1, further comprising receiving a communication from 
the wireless communication device that prevents association of the appliance ID with the 

! 

security indicia so that communicating the information from the private database to the 

wireless communication device is prevented. j 

i 

12. A method for remotely accessing a private) database residing in a remote 
database device using a wireless communication device, the method comprising: 

transmitting a radio frequency (RF) communication to the remote database 
device, the RF communication comprising a private; database access request and 
comprising an appliance identification (ID) that uniquely identifies the wireless 
communication device* such that when the appliance ID corresponds to a security indicia 
residing in the remote database device the private database is communicated from the 
remote database device; and 

receiving a second RF communication comprising at least die private database 
only when the appliance ID corresponds to the security indicia. 

13. The method of claim 12, further comprising communicating a multiple-use 
identification indicia corresponding to the appliance ID and that uniquely identifies the 
wireless communication device, and wherein the multiple-use identification indicia is 
included tn all communications from the wireless communication device. 

14. The method of claim 13, wherein the multiple-use identification indicia is a 
phone number* 

15. The method of claim 13, further comprising: 
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i 

transmitting an initial private database access request to the remote database 

device; 

transmitting a password uniquely identifying a user of the wireless 
communication device; and 

i 

receiving the second RF communication comprising at least the private database 
only when the password corresponds to a security oodd residing in the remote database 
device, the security code associated with the user, and wherein the security code is 
associated with the security indicia of the private database. 

i 

16, The method of claim 15, further comprising transmitting a subsequent private 
database access request to the remote database device, |the subsequent private database 
access request comprising the appliance ID, such that the second RF communication is 
received only when the appliance ID corresponds to the security indicia. 

17* The method of claim 12, further comprising: 
selecting a portion of die received private database using a browser, and 
displaying the selected portion of the received private database on a display 
residing on the wireless communication device using the browser, 

1 8. The method of claim 12, further comprising communicating an instruction to 
the remote database device that prevents association of the appliance ID with the security 
indicia so that communicating the private database to the wireless communication device 
is prevented. 

19. A system that remotely accesses a private database using a wireless 
communication device, the wireless communication device comprising: 

a transceiver configured to receive and transmit radio frequency (RF) 
communications; 

an appliance identification (ID) corresponding to a multiple-use unique identifier 
of the wireless communication device that is included in all transmitted RF 
co mmuni cations from the wireless communication device; and 

2(5 
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a processor configured to cause the transceiver to transmit a first RF 
communication to a database device having at least one private database, the first RF 
communication comprising the appliance ID and a private database access request so that 
the database device communicates the private database via a second RF communication 
only when the appliance ID corresponds to a security indicia residing in the database 

device associated with the private database, the security indicia. 

i 

20. The system of claim 19, further comprising a memory configured to store the 

received private database. j 

i 

21. The system of claim 19, further comprising: ; 

i 

a display; and 1 

a browser configured to display the received private database on the display. 

22. A system that provides accesses to a private database comprising: 

a communication system interface configured to receive a private database access 
request and a multiple-use unique identifier (ID) generated by a remote wireless 
communication device and configured to transmit a private database to the remote 
wireless communication device; 

a security indicia that corresponds to the multiple-use unique ID, the multiple-use 
unique ID being included in all communications from the wireless communication device 
and uniquely identifying the wireless communication device; and 

a processor configured to compare the multiple-use unique ID to the security 
indicia, and further configured to cause communication of the private database to the 
remote wireless communication device only when the multiple-use unique ID 
corresponds to the security indicia. 

23. The system of claim 22, further comprising a security code corresponding to a 
user associated with the private database, so that when the received ID is not initially 
associated with the security indicia, a password provided by the user of the remote 
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wireless communication device causes the multiple-use iinique ID to be associated with 
the security indicia when the password corresponds to the security code. 

j 

24. A computer-readable medium having a program for remotely accessing 
remote private databases using a wireless communication device, the program comprising 
logic configured to: 

i 

cause a transceiver to transmit a first radio frequency (RF) communication 
comprising a private database access request and a mriltiple-use unique identifier that 
uniquely identifies the wireless communication devic^ the first RF communication 
directed to a remote database device wherein a private database resides, and wherein the 
multiple-use unique identifier is included in all RF cot^rmunications from the wireless 
communication device; and 

i ■ 

cause the transceiver to receive a second RF communication comprising at least 

i 

the private database, the private database communicated to the wireless communication 
device by the remote database device only when the multiple-use unique identifier 
corresponds to a security number residing in the remote database device. 

25. A method for communicating information from a private database to a 
wireless telephone, the method comprising? 

transmitting a radio frequency (RF) communication from the wireless telephone 
to a remote database device wherein the private database resides, the RF communication 
comprising at least a private database access request and comprising an appliance 
identification (ID) that uniquely identifies the wireless telephone, the appliance ID being 
included in all communications from the wireless telephone and uniquely identifying the 
wireless telephone; 

receiving the private database access request and the the appliance ID by the 
remote database device; 

comparing the appliance ID with a security indicia, the security indicia associated 
with the wireless communication device; 

communicating the information of the private database from the remote database 
device when the appliance ID corresponds to the security indicia; and 

28 . 
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i 
1 

receiving a second RF communication by the \yireless telephone comprising at 
least the information of the private database. 

. j 

26. The method of claim 25 wherein the appliance ID is a telephone number. 

i 

27. A method of software execution for remotely accessing a remote database 
using a portable wireless communication device (PWCDi the method comprising: 

transmitting, via a radio frequency (RF) communication, an access request from 
the PWCD to the remote database, the access request including an identification of the 
remote database and an identification (ID) of the PWCD;- 

receiving, via an internet, the access request at the; remote database; and 
verifying, at the remote database, whether the ID is valid for allowing the PWCD 
to have access to information stored in the remote database. 

28. The method of claim 27 further comprising transmitting, via both the internet 
and the RF communication, the information from the remote database to the PWCD. 

29. The method of claim 27 further comprising displaying, using a browser in the 
PWCD, information received from the remote database. 

30. The method of claim 27 wherein the PWCD is a cellular phone, and the ID is 
a cellular phone number of the cellular phone. 

31. The method of claim 27 further comprising recognizing, at the remote 
database, a cellular phone number in the access request for identifying the PWCD as 
authorized to access the information stored in the remote database. 

32. The method of claim 27 further comprising authenticating, without a user of 
the PWCD entering a password, whether the PWCD is authorized to access the 
information stored in the remote database. 

29 
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IX, EVIDENCE APP*ENDtX 

Nona 



i 

! 
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X. RELATED PROCRFnTNCS APPENDIX 



None. 
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